mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
@@ -16,7 +16,7 @@
|
|||||||
{%- set MASTER = grains['master'] %}
|
{%- set MASTER = grains['master'] %}
|
||||||
{% set NODEIP = salt['pillar.get']('node:mainip', '') %}
|
{% set NODEIP = salt['pillar.get']('node:mainip', '') %}
|
||||||
{% set HELIX_API_KEY = salt['pillar.get']('fireeye:helix:api_key', '') %}
|
{% set HELIX_API_KEY = salt['pillar.get']('fireeye:helix:api_key', '') %}
|
||||||
|
{% set UNIQUEID = salt['pillar.get']('sensor:uniqueid', '') %}
|
||||||
|
|
||||||
# Global tags can be specified here in key="value" format.
|
# Global tags can be specified here in key="value" format.
|
||||||
[global_tags]
|
[global_tags]
|
||||||
@@ -25,6 +25,9 @@
|
|||||||
## Environment variables can be used as tags, and throughout the config file
|
## Environment variables can be used as tags, and throughout the config file
|
||||||
# user = "$USER"
|
# user = "$USER"
|
||||||
|
|
||||||
|
{% if grains['role'] == 'so-helix' %}
|
||||||
|
meta_cbid = {{ UNIQUEID }}
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
# Configuration for telegraf agent
|
# Configuration for telegraf agent
|
||||||
[agent]
|
[agent]
|
||||||
|
|||||||
@@ -182,7 +182,7 @@ input {
|
|||||||
type => "ossec"
|
type => "ossec"
|
||||||
}
|
}
|
||||||
file {
|
file {
|
||||||
path => "/wazuh/archives/archive.json"
|
path => "/wazuh/archives/archives.json"
|
||||||
type => "ossec_archive"
|
type => "ossec_archive"
|
||||||
}
|
}
|
||||||
file {
|
file {
|
||||||
|
|||||||
Reference in New Issue
Block a user